Roughly $13 million in person funds vanished from Russia crypto alternate Grinex in April 2026, and by the point the alternate suspended buying and selling, the cash was already transferring quick throughout blockchain networks towards a single vacation spot pockets. The halt left customers unable to entry their funds, withdraw balances, or execute trades, with no timeline given for restoration of providers.
Blockchain intelligence agency Elliptic confirmed the exploit and started monitoring the stolen belongings on-chain. The agency recognized Grinex as one of many largest venues for changing Russian rubles into crypto belongings, regardless of the alternate being formally registered in Kyrgyzstan, a element that issues a terrific deal for the customers now ready on solutions.
The complete scope of the breach, and whether or not all affected funds could be accounted for, stays underneath lively investigation.
Grinex, considered one of Russia’s largest cryptocurrency exchanges, was attacked, leading to a lack of roughly 13 million USDT
Grinex reported a cyberattack that resulted in losses of about 1 billion rubles (roughly $13 million) and led to a suspension of buying and selling providers.…
— Wu Blockchain (@WuBlockchain) April 17, 2026
DISCOVER: The Subsequent 1000x Crypto Gem Earlier than It Lists on Binance
How Attackers Drained and Disappeared $13M From One of many Greatest Russia Crypto Exchanges
The attackers focused Grinex’s sizzling wallets, the alternate’s internet-connected storage used for processing dwell trades, and drained a mixture of cryptocurrencies in a single coordinated operation. They then transformed these belongings into Tron ($TRX) tokens throughout decentralized and over-the-counter buying and selling venues, earlier than consolidating roughly 45.9 million TRX into one vacation spot pockets.
The selection of TRX was not unintentional. Tron provides decrease transaction charges and quicker settlement occasions than Ethereum, which reduces each value and complexity through the laundering part, the sort of operational element that factors to planning, not opportunism. An nameless blockchain forensics analyst famous that “the fast conversion to a single asset like $TRX, adopted by consolidation, signifies a extremely deliberate operation.”
Grinex publicly attributed the assault to “overseas intelligence providers”, particularly pointing fingers at Western state actors. Elliptic discovered no clear proof supporting that declare. The stolen funds stay traceable on-chain however haven’t been recovered. Grinex says it filed felony complaints and handed all obtainable proof to legislation enforcement.
The alternate additionally has reported ties to A7A5, a ruble-backed stablecoin allegedly used to facilitate over $100 billion in sanctions-evasion exercise, a connection that provides a big layer of regulatory complexity to an already messy state of affairs.
DISCOVER: Greatest Meme Coin ICOs to Put money into 2026
Why you possibly can belief 99Bitcoins
Established in 2013, 99Bitcoin’s staff members have been crypto consultants since Bitcoin’s Early days.
90hr+
Weekly Analysis
100k+
Month-to-month readers
50+
Knowledgeable contributors
2000+
Crypto Tasks Reviewed
Observe 99Bitcoins in your Google Information Feed
Get the most recent updates, traits, and insights delivered straight to your fingertips. Subscribe now!
Subscribe now 
